Elvith Ma'for

Former Reddfugee, found a new home on feddit.de. Server errors made me switch to discuss.tchncs.de. Now finally @ home on feddit.org.

Likes music, tech, programming, board games and video games. Oh… and coffee, lots of coffee!

I � Unicode!

  • 11 Posts
  • 409 Comments
Joined 2 years ago
cake
Cake day: June 21st, 2024

help-circle


  • And don’t listen to the promises of big companies with billion-funds, they cook with water like the rest of us.

    Oh, yeah, I remember when one of our super important core systems was migrated to SaaS. My system was interfacing with it, so I got notified about the migration to make a plan. I basically told them: “We’re using $API to connect to your system. Tell me the new hostnames and IP ranges and ports and I will configure the firewall on our end. Also, our connector for your migrated system will be deployed in $IP-range so please allow these inbound connections in your firewall.”

    Half a year later I got a message: “Yeah, we just found out, that $SaaS-provider never configured the firewall after our tickets and everything is reachable from the public internet. We’re forcing them to lock down the system now. Can you please tell us again from where you connect to us?”


  • If you put any data anywhere, assume it will be contained in a breach in the future. Blue teaming is hard. You have to be perfect every time. Red teaming is easy. You just have to wait till the blue team makes a simple mistake…

    Mails sent to a company? Their or your mail account will be breached one day.

    Account details on a webpage? Their user database will be leaked.

    Your cloud drive, ect.

    Even your data on your NAS at home or on your PC could get accessed in one way or another, you’re just a zero day and an unfortunate click away from disaster.

    On the upside, as long as you do not have a target on your back, patch your stuff in a timely manner and keep some hygiene in configs, secops … You should be fine, as most automated attacks aren’t that high level and target the low hanging fruits. But that doesn’t make you completely safe.



  • I wonder… How does gravity affect you inside the earth?

    In very simple thoughts: You fall down to the middle of the earth and accelerate (ok, friction would get you to the stated terminal velocity) and the decelerate on your way “up” on the other side.

    A bit more complicated: But this is just a hole, meaning there’s mass all around us. So this attracts us. But right in the center, we should be attracted by all mass around us in all directions. So I guess it pulls is into the center of mass? Or maybe it cancels all out and there is no gravity?













  • Yeah, but HTML5 needs a webbrowser that may have an Adblocker and then you cannot do tracking and you „cannot“ earn money. Also all (client side) features are potentially available for anyone and anyone can provide userscripts to improve your webpage for free.

    If you wrap it in an App, it’s against the DMCA (or your local equivalent) to reverse the App and disable the tracking. Or make a better version, or enable some features that are purely client side and you just decided to paywall into a subscription to earn more money. Or generally do anything that might hurt your current or future profits.